us bank 5 - Phishing

See also

Summary

Full description

Target:	us bank
Date discovered:	01/11/2007

General The goal is to get the following information:
• Bank account

Phishing method:
• URL link

Email Details From: service@usbank.com
Subject: Your Account As Been Suspended Please Login To Re-confirm. 1/11/2007

Visible link: http://www.usbank.com/update.asp?ID=**************************...
Actual link: http://www.jaggamers.com/modules/Forums/cache/USBank/index.html
IP address: 76.163.24.42

The email is designed to avoid detection from Antispam and Antiphishing. The technique is:
• The Body of the email contains HTML content.

This screenshot is how the phishing email looks like:

Page Details Visible URL: http://www.jaggamers.com/modules/Forums/cache/USBank/index.html
Actual URL: http://www.jaggamers.com/modules/Forums/cache/USBank/index.html
IP address: 76.163.24.42

The phishing page will look like the following:

See a brief description here.

Description inserted by Dominik Auerbach on Thu, 01 Nov 2007 12:10 (GMT+1)

» About Malware
» About Phishing
» Viruses In the Wild

« back